cb826bf145939b66614f0710db47b2a3e898738f7d93819c56d6aa0350b32e2d

Analysis

max time kernel
0s
max time network
4s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
28/03/2025, 11:17

Target

JaffaCakes118_8a9f23ed8677323afc6fa57de11c0b8e.exe
Size

28KB
MD5

8a9f23ed8677323afc6fa57de11c0b8e
SHA1

60a9251bff6d610fa7e470eb294009296081f0f7
SHA256

cb826bf145939b66614f0710db47b2a3e898738f7d93819c56d6aa0350b32e2d
SHA512

cc12258c225d552d70e0f3f167aeb52bf89b422fc86341c16fd5287eee42a18df8d681bb21a426ae149fa40b33ad2152b3ad6afd9ebd8339f3657eaefcc3702e
SSDEEP

384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN8DC5J:Dv8IRRdsxq1DjJcqfhDkJ

Score

5^/10

upx

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2248-0-0x0000000000500000-0x0000000000510000-memory.dmp	upx
behavioral1/memory/2248-4-0x0000000000220000-0x0000000000228000-memory.dmp	upx
behavioral1/files/0x00080000000186b7-7.dat	upx
behavioral1/memory/2028-10-0x0000000000400000-0x0000000000408000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8a9f23ed8677323afc6fa57de11c0b8e.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8a9f23ed8677323afc6fa57de11c0b8e.exe"
1⤵
PID:2248
- C:\Windows\services.exe
  "C:\Windows\services.exe"
  2⤵
  PID:2028

C:\Windows\services.exe

Filesize
8KB

MD5
b0fe74719b1b647e2056641931907f4a

SHA1
e858c206d2d1542a79936cb00d85da853bfc95e2

SHA256
bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c

SHA512
9c82e88264696d0dadef9c0442ad8d1183e48f0fb355a4fc9bf4fa5db4e27745039f98b1fd1febff620a5ded6dd493227f00d7d2e74b19757685aa8655f921c2

Download Submit
memory/2028-10-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/2248-0-0x0000000000500000-0x0000000000510000-memory.dmp

Filesize
64KB

Download
memory/2248-4-0x0000000000220000-0x0000000000228000-memory.dmp

Filesize
32KB

Download